TechInfo

Dear Campus Community,

You may have received an email recently with the subject line “Webmail Internet Support”.  The email sender requested a reply with your email password and other personal information.  DO NOT RESPOND TO THE EMAIL.

It is not the policy of Information Resources to ever ask for your password, especially through email.  The email sent out today was in fact, an email phishing scam.  If you did respond to the email, you must change your password immediately at https://colfax.cortland.edu/password.

If you need further assistance, please contact:

Technology Help Center
SUNY Cortland
Winchell Hall
Phone: 607.753.2500
Fax: 607.753.5599
Email: Helpdesk@cortland.edu
Hours: M-Th, 8:00-6:00 F, 8:00-4:30
Summer & vacations M-F, 8:00-4:30

Sent by: NEW YORK STATE OFFICE OF CYBER SECURITY AND CRITICAL INFRASTRUCTURE COORDINATION INFORMATION BULLETIN

I. Phishing

Beginning on August 5, 2008 reports of mass emails claiming to be from the CNN.com news Web site began to surface. Currently the subject of the email is “CNN.com Daily Top 10”. These emails are not from CNN, and contain web links to malicious sites that will attempt to install malware purporting to be an Adobe Flash Player upgrade. The MS-ISAC has received reports from multiple states including Michigan, New York, North Carolina and Wisconsin, indicating their users have received these emails.

These emails have been circumventing spam filters and utilizing html based messages including the CNN web site logo and very enticing headlines to lure unsuspecting recipients into clicking on the links for news stories which are actually downloads of malware from various web sites. Reports indicate that hundreds of web servers may be compromised and hosting this malicious content. The use of news and current events are a proven and effective social engineering tool.

As the 2008 Olympics will be starting Friday, August 8, we anticipate spammers, phishers, and other online attackers may use bogus “Olympic-themed” headlines in their scams. We recommend that organizations use this as an opportunity to remind users to use caution when handling suspicious or unexpected email messages and URLs.

Thank you

Administrative Computing Services

Please be advised SUNY Cortland will never ask you to verify your email account password.

There are messages appearing in Cortland email accounts from “Cortland Management”.

These are NOT being sent from SUNY Cortland staff.

These messages are attempts to gain access to your email account and personal information by spammers and hackers.

Please do not respond and delete any messages of this nature. If you read the message and responded directly to the email, we urge you to change your password immediately.

To change your password, go to the webmail page and click on the “Change Webmail Password” link.

If you need more information, please contact:
Scott Thomas
Admin Computing
adminc@cortland.edu